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Top Stories 

• Margarita’s Mexican Restaurant in Holland, Michigan, voluntarily shut down after 150 
people reported illness after eating there. - Associated Press ( 11 ) 

• The ongoing drought could be to blame for about nine water main breaks in July that 
required Bloomington, Illinois, to send water to Towanda and Hudson the week of July 23. 
- Bloomington-Normal Pantograph ( 20 ) 

• A cryptography specialist released tools for cracking passwords in wireless and virtual 
private networks that use a popular encryption protocol based on an algorithm from 
Microsoft. The tools were released at the Def Con conference July 28. - CNET (36) 

• Some 700 people were evacuated from a Walmart in Secaucus, New Jersey, after a bomb 
threat was phoned in July 30, authorities said. The threat was 1 of 12 that was recently 
phoned in to Walmart stores across the country. - Jersey Journal ( 38 ) 
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Energy Sector 

1. July 30, Associated Press - (Wisconsin) Wis. utility to spend $430M to reduce 
emissions. Alliant Energy said it would spend as much as $430 million to reduce 
emissions at its coal-fired plant in Sheboygan, Wisconsin. The utility said July 27 it 
would install a system to reduce emissions of sulfur dioxide from the largest of its three 
coal-fired generators. The Sheboygan Press reported the project must first be approved 
by the State Public Service Commission. Alliant officials also plan to retire the oldest 
of the Edgewater Generating Station’s three coal generators by 2015. They will also 
decide by 2013 whether to switch the other to natural gas or to shut it down. 

Source: http://dailvreporter.com/2012/07/30/wis-utility-to-spend-430m-to-reduce- 
emissions/comment-page- 1/ 

2. July 30, Platts - (Pennsylvania) Conveyor failure halts output at Consol steam coal 
mines in Pennsylvania. Steam coal production at Consol Energy’s Bailey and Enlow 
Fork mines in southwestern Pennsylvania could be shut for the next 2 weeks because of 
a “structural failure” of an above-ground conveyor system at the Bailey preparation 
plant that occurred the weekend of July 28, the Pittsburgh-based company said July 30. 
Consol said the belt system conveys coal from the Bailey and Enlow Fork mines to the 
preparation plant. The company said in a statement that while it is still conducting an 
assessment, “initial indications are that coal from the Bailey and Enlow Fork mines 
could be fully impacted for the next 2 weeks. If, at that time, one of the two collapsed 
belts is returned to service, the mines could operate at an estimated 60 [percent] of 
capacity.” Consol said it does not expect to curtail any domestic sales because all of the 
company’s other Northern Appalachian mines are operating normally but warned that 
overseas shipments in the spot market could be affected. 

Source: http://www.platts.com/RSSFeedDetailedNews/RSSFeed/Coal/6509746 

T Return to top i 

Chemical Industry Sector 

3. July 30, Corpus Christi Caller-Times - (Texas) Flint Hills Resources: Leaked 
chemicals didn’t exceed allowed levels. Flint Hills Resources reported to the Texas 
Commission on Environmental Quality that none of the chemicals released during an 
incident July 24 at the West Refinery in Corpus Christi exceeded allowed levels. A leak 
detected at the plant’s alkylation unit released 246 pounds of propane, 27.5 pounds of 
hydrofluoric acid, and 26.1 pounds of a mixture of different volatile organic 
compounds, according to emissions estimates Flint Hills submitted to the 
environmental agency. The Environmental Protection Agency requires companies to 
report hydrofluoric acid releases of 100 pounds or more. The leak occurred in a 90- 
degree bend of a flare pipeline on the alkylation unit, according to the company’s 
report. Employees wrapped the problem area with a special chemical tape, which 
stopped the leak about 2 hours later. Air monitoring in the area detected “trace levels” 
of hydrofluoric acid that the company reported were not of the concentration to cause 
health problems. The unit was restarted July 28, a Flint Hills spokeswoman said. 
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Source: http://www.caller.com/news/2012/iul/30/flint-hills-resources-leaked- 
chemicals-didnt/ 
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Nuclear Reactors, Materials and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. July 31, Hartford Courant - (Connecticut) Fire mostly out at Rex Forge in 
Southington. Part of a building at Rex Forge in Southington, Connecticut, collapsed 
after a fire broke out there July 31. Thick black smoke rose from the fire, leading to the 
closure of exit ramps from nearby 1-84. A fire department captain said it appeared that 
oil used in the metal forging process caught fire, and by the time firefighters got to the 
scene, a large part of the building was heavily involved. Approximately 50 people were 
in the building when the fire broke out, and one of them suffered from smoke 
inhalation. Oil used at the forge was washing into the nearby Quinnipiac River, and 
Connecticut Department of Energy and Environmental Protection was on the scene to 
coordinate cleanup. A State official said the fire was in a 6,000 gallon oil tank. Water 
used to fight the fire caused some of that oil to overflow into a brook that runs into the 
Quinnipiac River. 

Source: http://www.courant.com/communitv/southington/hc-southington-fire-0801- 
20 120731, 0,74664 12.story 

5. July 30, Reuters - (National) Hyundai recalls Santa Fe, Sonata on air bag 
issues. Hyundai Motor Co announced July 30 the recall of 199,118 Santa Fe sport 
utility vehicles (SUV) and 22,513 Sonata sedans in the U.S. for separate air bag issues. 
Santa Fe SUVs that were made from April 2006 through July 7, 2008, were recalled 
because the front passenger air bag may not deploy in a crash, the National Highway 
Traffic Safety Administration said. The airbag sensors may have difficulty detecting 
small adults seated in the front passenger seat. Separately, Hyundai is recalling Sonata 
sedans from the model years 2012-2013, made from January to June, because the side 
air bag may inflate unexpectedly, to the surprise of the driver. 

Source: http://www.reuters.com/article/2012/07/30/us-hyundai-recall- 
idUSBRE86T0PC20 1 20730 

T Return to top i 



Defense Industrial Base Sector 
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Nothing to report 
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Banking and Finance Sector 

6. July 30, Riverside Press-Enterprise - (California) Bank robber ‘Plain Jane Bandit’ 
strikes again. The “Plain Jane Bandit,” suspected in the robbery of six banks in 
southern California, struck again in Downey, California, July 30. The unidentified 
woman robbed a Bank of America, according to the FBI. She is being sought for the 
robberies of two Moreno Valley banks and one robbery each in Wildomar, Santa Fe 
Springs, Whittier, and Buena Park. 

Source: http://www.pe.com/local-news/local-news-headlines/20120730-region-bank- 
robber-plain-jane-bandit-strikes-again.ece 

7. July 30, U.S. Department of Justice - (New York) Two Queens attorneys convicted 
of mortgage fraud. A federal jury in New York City returned a verdict July 30 
convicting 2 attorneys on 10 felony counts for participating in a mortgage fraud scheme 
that resulted in over $25 million in fraudulently-obtained loans from Countrywide 
Financial, Fremont Investment and Loan, IndyMac Bank, Sun Trust Mortgage, Inc., 
Wells Fargo & Company, and New Century Mortgage Corporation. From January 2006 
to September 2008, the defendants, partners at a law firm, worked as attorneys at real 
estate closings for fraudulent home sales. The defendants worked with co-conspirator 
real estate agents and loan officers to falsify loan documents in order to induce banks to 
give mortgage loans for properties located in Queens, Brooklyn, and Long Island. 

Many of the properties were purchased by “straw buyers” who had been recruited by 
the co-conspirator real estate agents and loan officers to purchase the properties. In 
many instances the straw buyers subsequently failed to make mortgage payments to the 
lending institutions, and as a result millions of dollars of loans entered default. The 
defendants profited by paying themselves attorneys’ fees from the mortgage loan 
proceeds. 

Source: http://www.iustice.gov/usao/nve/pr/2012/2012iul3Q.html 

8. July 30, State Island Advance - (New York) No bail for suspect in spree of daily 
bank robberies, including Staten Island heist. The alleged 1-a-day bank bandit, who 
authorities said started a 5-day robbery spree in New York City’s Staten Island the 
week of July 23, was held without bail July 30 after his arrest. The man was suspected 
in five robberies over the course of a week. He was suspected of robbing a Northfield 
Bank branch July 22 and then of robbing the same Chase branch in Williamsburg, 
Brooklyn, July 23 and July 24. He then allegedly robbed a Citibank branch in 
Ridgewood, Queens, July 25. And July 26 he was suspected in two incidents in Forest 
Hills, Queens. The first time, the teller turned him away, so he walked down the block 
and robbed a second bank instead. 

Source: http://www.silive.com/news/index.ssf/2012/Q7/once-a- 
day bank bandit who sta.html 

[ Return to top ] 
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Transportation Sector 



9. July 31, Colorado Springs Gazette - (Colorado) Highway 24 open in both directions 
after mudslides. Rain saturated the Waldo Canyon burn scar in Colorado, July 30, 
meaning there was increased potential for flash flooding if thunderstorms hit the area 
July 31, according to the National Weather Service. U.S. 24 has reopened in both 
directions after it was closed for hours July 30 and 31 near Cascade and, for a while, 
near Cave of the Winds in Manitou Springs. Crews worked to clear mud that blanketed 
the highway after thunderstorms pelted the region. Colorado Springs Utilities was 
working to restore power to nearly 280 customers in Green Mountain Falls, a 
spokeswoman said. At one point, 1,800 Utilities customers were without electricity. 
Source: http://www.gazette.com/articles/service-142447-storm-expected.html 

For another story, see item 4 
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Postal and Shipping Sector 

10. July 30, Hawaii News Now - (Hawaii) Chemical exposure sends USPS worker to 
hospital. An employee of the United States Postal Service in Honolulu was taken to the 
hospital July 28 after he became ill while handling a parcel that contained a chemical 
substance. The Honolulu Fire Department was called to the post office after the 
employee reportedly fainted. The man was handling parcels when he discovered one 
that was wet and had a blue tinge, according to authorities. The man apparently went to 
wash his hands after coming into contact with the substance, but he reported feeling 
nauseous and out of breath a short time later and was transported to a local hospital. 
Tests came back showing the presence of a chemical from the amine family, commonly 
found in cleaning materials and perfumes. According to the Honolulu Fire Department, 
the post office was not evacuated during the incident but, the area where the specimen 
was found was cordoned off to prevent further incident. 

Source: http://metrooahu.hawaiinewsnow.com/news/news/101525-chemical-exposure- 
sends-usps-worker-hospital 
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Agriculture and Food Sector 

11. July 31, Associated Press - (Michigan) 150 sickened after eating at Holland area 
restaurant. State health officials on the west side of Michigan said the number of 
people reporting illness after eating at a restaurant in Holland reached 150, the 
Associated Press reported July 31. The Health Department said Margarita’s Mexican 
Restaurant voluntarily shut down after officials started investigating July 26. The 
department launched its probe after getting reports of 10 illnesses. Health officials 
hoped to get results from lab tests the week of July 30. 
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Source: http://detroit.cbslocal.com/2012/07/31/150-sickened-after-eating-at-holland- 
area-restaurant/ 



12. July 31, Food Safety News - (International) Canada kicks off genome mapping of 
Listeria. Canada kicked off a $600,000 project to map the genome of Listeria bacteria 
so that more rapid tests can be developed, Food Safety News reported July 31. The 
Canadian Food Inspection Agency (CFIA), Genome Canada, and Alberta Innovates 
Bio Solutions are teaming up to help protect consumers from the food-borne illness. 
The 18-month research initiative is being funded with $250,000 each from Genome 
Canada and CFIA, and $100,000 from Alberta Innovates Bio Solutions. Currently, it 
takes at least 5 days to confirm the presence of Listeria. Genomic mapping could 
improve accuracy and cut the time it takes for both the government and industry to 
identify Listeria contamination. 

Source: http://www.foodsafetvnews.com/2012/07/canada-kicks-off-genome-mapping- 
of-listeria/ 



13. July 30, Palm Beach Post - (Florida) Citrus quarantine violators sentenced. Four 
Palm Beach County, Florida residents were sentenced in U.S. District Court on charges 
that they smuggled citrus trees out of Florida in violation of a quarantine to stop the 
spread of citrus canker and greening diseases, federal officials said July 30. The owner 
of Valrico Nurseries of Boynton Beach, his daughter, and the co-owners of Allied 
Growers of Fort Lauderdale, were sentenced July 27. The criminal conduct which 
violated the federal Plant Protection Act involved shipping more than 1,650 
Calamondin plants, a type of ornamental citrus, according to the government. 
Calamondin has been under quarantine in Florida for many years as part of an effort to 
eradicate citrus canker. The U.S. District Court Judge who had earlier accepted guilty 
pleas from each of the defendants on the conspiracy charge, sentenced the owner of 
Valrico Nurseries to 1 year’s probation including 6 months’ home confinement with 
electronic monitoring and 100 hours of community service. He is also prohibited from 
being involved with the sale of plants without the court’s permission. His daughter also 
received 1 year’s probation, 50 hours of community service, and a similar employment 
restriction. The co-owners of Allied Growers were each ordered to serve 1 year’s 
probation, but they were not placed under employment restrictions or ordered to 
perform community service because they cooperated in the case’s investigation and 
resolution, the government said. 

Source: http://www.palmbeachpost.com/news/business/citrus-quarantine-violators- 
sentenced/nP62Q/ 

14. July 30, Daily Astorian - (Oregon) Mussel harvest OK’d. The Oregon Department of 
Agriculture and the Oregon Department of Fish and Wildlife are reopening a portion of 
the central coast to recreational mussel harvesting, from Tillamook Head south to 
Heceta Head, about 13 miles north of Florence, the Daily Astorian reported July 30. 
Shellfish samples taken from the area indicate levels of paralytic shellfish toxins have 
dropped below the alert level. The area was closed to recreational mussel harvesting 
July 6. With the reopening, the entire Oregon Coast is now open to most recreational 
shellfish harvesting. A conservation closure remains in effect for razor clamming along 
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Clatsop beaches on the north Oregon Coast through August to protect young razor 
clams. 

Source: http://www.dailvastorian.com/news/local/mussel-harvest-ok- 



d/article Ib9b5ddc-da6f-l Iel-96b7-0019bb2963f4.html 



15. July 27, U.S. Food and Drug Administration - (Colorado; Kansas) Wimberger’s Old 
World Bakery & Delicatessen issues allergy alert on undeclared milk, soy and 
wheat in Kaiser Rolls, Seeded Rolls, Brat Buns, French Bread, Pretzel Rolls, 
Pretzels, Pizza Dough, Hoagie Rolls and Baguettes. Wimberger’s Old World Bakery 
& Delicatessen conducted a voluntary recall of all Kaiser Rolls, Seeded Rolls, Brat 
Buns, French Bread, Pretzel Rolls, Pretzels, Pizza Dough, Hoagie Rolls, and French 
Baguettes because they contain undeclared milk, soy, and wheat, the U.S. Food and 
Drug Administration reported July 27. The baked products were distributed to grocery 
stores, delicatessens, and restaurants located in Colorado and Kansas. The recall was 
initiated after it was discovered that products containing undeclared amounts of milk, 
soy, and wheat were distributed in packaging that did not reveal the presence of the 
allergens. Subsequent investigation indicates the problem was caused by a labeling 
transcription omission from one of the sub-ingredient’s (margarine) used in the 
production of the recalled products. 

Source: http://www.fda.gov/Safety/Recalls/ucm313568.htm 
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Water Sector 



16. July 31, Kennewick Tri-City Herald - (Washington) Cleanup proposed for central 
Hanford ground water pollution. The Department of Energy (DOE) and the 
Environmental Protection Agency (EPA) are proposing a $319 million plan to clean up 
much of the radioactive and hazardous chemical ground water contamination over 35 
years in a portion of central Hanford, Washington, the Kennewick Tri-City Herald 
reported July 31. However, a lack of viable technology for certain contaminants will 
keep the ground water from being cleaned to drinking water standards for much longer 
than that. The goal of DOE, EPA, and the Washington State Department of Ecology is 
to clean ground water to potentially be used as a source of drinking water. 
Contaminated water would be pumped up at a rate of 430 gallons per minute. No 
matter how aggressively contaminants are pumped out of the ground and treated, all of 
the carbon tetrachloride cannot be removed by that method, said a senior technical 
adviser for DOE’s groundwater treatment program. About 5 percent of the carbon 
tetrachloride would remain and naturally disperse and diffuse to return ground water to 
drinking water standards over an estimated 125 years. The plume to the north 
associated with the Plutonium Finishing Plant, which also has carbon tetrachloride, also 
is expected to require 125 years to reach drinking water standards. No technology has 
been found by DOE to clean radioactive iodine 129 from ground water. Instead, it is 
proposed to be controlled with hydraulic containment. 

Source: http://www.tri-citvherald.com/2012/07/31/2Q41624/cleanup-proposed-for- 
central-hanford.html 
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17. July 31, St. Louis Post-Dispatch - (Missouri) Crews busy with overnight water main 
breaks in St. Louis. Hot and dry conditions were blamed for 3 water main breaks 
overnight across St. Louis. Early July 31, repair crews were just beginning to shut off a 
valve at a break on Maury Avenue. Once the water supply was cut off, about 50 
customers were expected to be without water for several hours as the crews fixed the 
problem, said the assistant to the water commissioner. Elsewhere in the city, water was 
shut off to three people and the Clifton post office branch after a main broke. That fix 
was expected to be completed July 31, officials said. Additionally, crews were nearly 
finished repairing a water main break at Clarence and Carter avenues July 31. About 40 
homes were without water at the beginning of the repair, but the service was restored to 
all but 4. Officials said the summer heat and drought conditions caused the ground 
around the pipes to stretch and contract, cracking the pipes. 

Source: http://www.stltodav.com/news/local/metro/crews-busv-with-overnight-water- 
main-breaks-in-st-louis/article 170a5408-db0f-llel-98ce-001a4bcf6878.html 



18. July 31, Bloomfield Independent Press - (New Jersey) Water main break leads to low 
pressure in Warren, Watchung, Scotch Plains, Fanwood. New Jersey American 
Water customers in Union County and Warren Township and Watchung Borough were 
asked to conserve water following a water main break in Scotch Plains July 31. The 
break occurred on a 48 -inch transmission main, according to an email sent the water 
company to the borough. The break flooded homes and businesses in the area and 
caused residents to be evacuated. It also drained water from the elevated tanks serving 
the area, which is “causing low pressure in sections of Fanwood, Scotch Plains, Warren 
and Watchung,” the email stated. Crews were attempting to isolate the break by closing 
valves and, once isolated, pressure should recover in the tanks and crews will begin 
work on repairs. Repairs estimated to take a minimum of 24 hours to complete and 
customers in the area of the break would continue to experience low pressure. 

Source: 

http://www.ni.com/independentpress/index.ssf/2012/07/water main break leads to lo 
w.html 



19. July 30, Lexigton Herald Leader - (Kentucky) Boil-water advisory in Berea. Berea, 
Kentucky residents were advised to boil water before drinking or cooking until further 
notice because of a “critical valve failure” at the water plant, the Lexington Herald- 
Leader reported July 30. The broken valve caused low water pressure before it was 
repaired, prompting the utility company to issue the boil advisory, according to a news 
release. 

Source: http://www.kentuckv.com/2012/07/30/2277781/boil-water-advisory-in- 
berea.html 



20. July 30, Bloomington-Normal Pantagraph - (Illinois) Drought blamed for water 
main breaks. The ongoing drought could be to blame for an uptick in water main 
breaks in July that required Bloomington, Illinois, to send Normal water to Towanda 
and Hudson the week of July 23. The city saw about nine water main breaks in July 
which the water director said was high compared to the one break in July 2011, two 
breaks in July 2010, and four breaks in July 2009. “We think some of the breaks we 
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have this month is because of too dry soil,” he said. The drying soil shrinks, 
compacting and causing the pipes to break. He said the city cannot positively attribute 
any water main breaks to the drought but in several cases there appears to be no other 
reason. Normal also repaired 6 broken water mains in July. That is only slightly above 
the four or five the department typically has in an average July. Bloomington’s water 
supply comes from two lakes, which are more vulnerable during a drought than 
Normal’s underground supply. The lakes — Evergreen and Lake Bloomington — were 
a combined 6.2 feet below average July 30. Voluntary water use restrictions are not 
triggered until lake levels are 8 feet below normal, which is not expected until 
September. 

Source: http://www.pantagraph.com/news/local/dought-blamed-for-water-main- 
breaks/article a5f7bl ib-daab- llel .1 2eT M ) 1 0611206 3 f4.html 

For more stories, see item 4 
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Public Health and Healthcare Sector 



21. July 31, Associated Press - (Connecticut) Stolen computer contains patient 
information. The Associated Press reported July 31 that a laptop computer stolen from 
a health care vendor that provides services in Connecticut contained the personal 
information of close to 10,000 patients of Hartford Hospital and VNA Healthcare, a 
home health care group. Hospital officials said they learned of the theft June 26, after it 
was reported in San Mateo, California, by an employee of Greenplum, a vendor that 
was performing some data analysis related to hospital readmissions. A hospital 
spokeswoman said the data on the laptop includes names, Social Security numbers, 
Medicaid and Medicare numbers, diagnosis and treatment records, and other 
information. She said the data was not encrypted, but there is no indication that any of 
the information has been misused. The hospital set up a call center and the patients 
involved are being offered free credit monitoring. 

Source: http://www.thehour.com/news/state regional/stolen-computer-contains- 
patient-information/article 22465703-ecl8-55d8-a9b2-878e00f753bl.html 

22. July 31, WSPA 7 Spartanburg - (South Carolina) GHS: Some patients potentially 
exposed to rare brain disease. Greenville Hospital System (GHS) in Greenville, South 
Carolina, was investigating whether 1 1 patients were potentially exposed to 
Creutzfeldt- Jacob disease (CJD), a rare brain disease, during neurological surgeries, 
WSPA 7 Spartanburg reported July 31. The statement from the hospital said the 
patients may have been exposed to CJD due to the surgical instruments being used on a 
patient later diagnosed with the neurodegenerative disorder. The surgeries took place at 
Greenville Memorial Hospital in February. GHS officials said there has never been a 
case of CJD transmission through surgical instruments. The CJD patient’s diagnosis 
was not known at the time of the surgery according to GHS, which said all instruments 
were sterilized according to rigorous U.S. protocols. The Centers for Disease Control 
recommended that instruments that have come into contact with CJD undergo 
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additional sterilization. 

Source: http://www2.wspa.eom/news/2012/iul/3 1/2/ghs-surgery-patients-potentially- 
exposed-rare-brai-ar-4243337/ 

23. July 30, WWJ 62 Southfield; Associated Press - (Michigan) Michigan hospitals 
linked to hepatitis-C investigation. Michigan State health officials said July 30, a 
traveling medical technician accused of causing a hepatitis C outbreak in New 
Hampshire worked in at least six Michigan facilities from 2003 to 2007. Officials said 
patients who underwent procedures between 2005 and 2007 at the four remaining 
hospitals — Harper, Sinai Grace, University of Michigan Hospital, or Oakwood 
Annapolis — should probably be tested for possible exposure. The Michigan 
Department of Community Health said its “investigation has not uncovered evidence 
that the individual was infected with hepatitis C while employed at any Michigan 
facility,” and a negative test result at one Michigan hospital allowed them to exclude 
two hospitals from further examination. 

Source: http://detroit.cbslocal.corn/2012/07/30/michigan-hospitals-linked-to-hepatitis- 
c-investigation/ 

24. July 30, Salt Lake Tribune - (Utah) Fire forces evacuation of senior rehab center. At 

least 80 senior patients at Legacy Village, a memory care and rehabilitation facility, 
were displaced in Taylorsville, Utah, July 30 after a fire broke out and caused about 
$200,000 in damage. All patients were cared for and transported by bus and housed at 
various care facilities around the Salt Lake Valley, said an administrator. A medical 
assistant saw small flames above the rain gutter and called 9-1-1. After the call, the 
flames flared up onto the roof with billowing smoke. The medical assistant went back 
inside to help evacuate patients, calling the process “organized” and calm. Firefighters 
responded and found smoke and flames pouring out of the roof, said a spokesman for 
Unified Fire Authority. He said it took firefighters about 30 minutes to beat back 
flames. Crews then cut through the roof with chain saws to track down hot spots. 
Source: http://www.sltrib.com/sltrib/news/54592694-78/fire-facilitv-flames- 
patients.html.csp 
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Government Facilities Sector 



25. July 31, Associated Press - (International) Bomb scare closes US Embassy in 

Norway. The U.S. Embassy and an area of central Oslo, Norway, were evacuated July 
31 when a fake explosive device was mistakenly left beneath a vehicle trying to enter 
the compound, police said. The discovery of the device by security guards also led to 
the evacuation of the royal palace, the halting of subway traffic in the area, and the 
cancellation of an international children’s soccer game at nearby Voldslokka Stadium 
so police could use the field for helicopters. The bomb scare and police search closed 
the entire area for several hours. “The Oslo police bomb squad has removed the object 
and can confirm that it was a dummy bomb,” police said in a statement. “The car has 
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been used for an internal drill at the embassy, and the find can be connected to this.” 
Source: http://www.npr.org/templates/storv/story.php?storvId=157637141 

26. July 30, KOIN 6 Portland - (Oregon) Pesticide leak prompts hazmat callout at Ore. 
Water Science Center. A chemical leak at a Portland, Oregon building led to a 
HAZMAT response July 30. Portland Fire & Rescue (PF&R) reported that the spill 
occurred at the U.S. Geological Water Science Center. According to PF&R, a person 
was combining 30 pesticide chemicals together in a “mixing vessel” when an unknown 
amount leaked onto the person’s hand and into the air. The area around the spill was 
evacuated as a precaution. It was determined that only one person was exposed to the 
chemicals. That person was decontaminated by a PF&R HAZMAT crew before being 
transported to a local hospital for evaluation. 

Source: http://www.koinlocal6.com/news/local/story/Pesticide-leak-prompts-hazmat- 
callout-at-Ore/3p7WKu7WgUavmhfL-SWNUw.cspx 

27. July 30, KRNV 4 Reno - (Nevada) Evacuation in Elko County due to suspicious 
symbol. Employees of the Elko County, Nevada Courthouse, the Annex building, and 
County Administration building were evacuated July 30 due to suspicious graffiti. The 
graffiti is described as a stencil of a bomb with the word “freedom” stenciled inside of 
it. The graffiti was discovered on the back outside wall of the Elko County Library. It 
was also found on the front steps of the Elko County Police Station. Police responded 
with a bomb sniffing canine, and the courthouse and county offices were closed for the 
day. It took longer than expected to search all the buildings, and no devices were found. 
Source: http://www.mvnews4.com/news/story/Evacuation-in-Elko-Countv-due-to- 
suspicious-svmbol/5Pe6ib4Gp0K4freL6JA7Bw.cspx 
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Emergency Services Sector 

28. July 30, Jackson Clarion-Ledger - (Mississippi) Soggy Hinds jail standoff. The latest 
incident at the Hinds County Detention Center in Raymond, Mississippi, left one 
section of inmate housing decimated. A disturbance in Pod C, that officials said started 
the afternoon of July 30 occurred when an inmate escaped from his cell, led to a 12- 
hour standoff. The inmate, who was joined by other inmates, held guards at bay with a 
fire hose, officials said. “The entire pod was flooded and fixtures were torn down,” said 
the sheriff. The 183 inmates housed there are being divided up between other units in 
Hinds County, as well as the Ran ki n and Madison County jails. 

Source: http://www.clarionledger.com/article/20 1 207 3 1/NEW S/207 3 1 0324/Soggy- 
Hinds-jail-standoff 

29. July 30, Gazette-Virginian - (Virginia) Lightning strikes Halifax County 911 
center. Lightning struck the Halifax County, Virginia 9-1-1 Center during a storm July 
27. According to the emergency services coordinator the storm hit the center and 
caused a surge in electricity damaging several computers and the phone system. The 
lightning strike at the center is the second in 3 weeks. The coordinator said damage 
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occurred to the radio control system operated by computers, but personnel were able to 
use backup radios until repairs were made. The computer aided dispatch system also 
was damaged and was under repair, he said. Contractors responded to help make the 
repairs, and most of the repairs have been made, but it will still be a lengthy repair 
process, he said. 

Source: http://www.vourgv.com/index.php/news/local-news/5918-lightning-strikes- 
halifax-county-9 1 1 -center 
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Information Technology Sector 

30. July 31, Dark Reading - (International) Hiding SAP attacks in plain sight. As some 
of the biggest processors of regulated data in any large organization, business-critical 
applications like enterprise resource planning (ERP) applications from SAP are well 
within the purview of compliance auditors and malicious attackers. Many organizations 
believe that if these systems are set behind firewalls, they are safely segmented enough 
to not require further hardening. However, as one researcher demonstrated at Black Hat 
the week of July 23, business-critical application servers never process data as an 
island, and in those connections there are opportunities for attack by hiding malicious 
packets within admissible ones. Called server-side request forgery (SSRF), the attack 
technique highlighted by the head of Russian firm ERPScan makes it possible to 
execute a multi-chained attack on SAP applications that can be executed from the 
Internet while bypassing firewalls, IDS systems, and internal SAP security 
configurations. 

Source: http://www.darkreading.com/database- 
securit y/ 167901 020/security/news/2400046 1 0/ 



31. July 30, Agence France-Presse - (International) Hackers topple Huawei 
routers. Hackers at the Def Con conference were shown how to easily gain access to 
computer networks through some routers made by Chinese electronics manufacturer 
Huawei Technologies. The chief of Recurity Labs and his teammate were troubled that 
Huawei did not issue any security advisories about its routers to warn users to take 
precautions. The chief referred to the routers studied by Recurity as having technology 
reminiscent of the 1990s and said once attackers gain access, they could potentially run 
amok in networks. Recurity did not examine “big boxes,” large routers Huawei makes 
for businesses and telecom networks. 

Source: 

http://www.google.com/hostednews/afp/article/ALeqM5iVXDPSv7MVxlJGRfmLa6X 

nvQK3xQ 

32. July 30, The Verge - (International) New zero-day exploits in industrial software 
channel the ghost of Microsoft Bob. A security researcher at the Def Con conference 
revealed several new zero-day exploits in the supervisory control and data acquisition 
(SCAD A) systems used to interface with industrial machinery. For these latest 
vulnerabilities, the researcher presented the 17-year-old software, Microsoft Bob. Bob 
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may be long gone, but the researcher showed the captive kiosk interface shares 
similarities with Human Machine Interfaces (HMIs) — the software “control panels” 
for SCADA systems — and demonstrated how they can be manipulated to allow 
unauthorized access. 

Source: http://www.theverge.com/2012/7/30/3200342/zero-dav-scada-bugs-microsoft- 
bob-defcon 



33. July 30, The H - (International) EFI rootkit for Macs demonstrated. At the Black 
Hat conference, an Australian security expert demonstrated a rootkit which is able to 
insert itself into a Macbook Air’s EFI firmware and bypass the FileVault hard drive 
encryption system. Although the concept of an EFI rootkit is not new, this was the first 
time it was demonstrated live and the hacker used a previously unknown method based 
on a modified Thunderbolt to Ethernet adapter. 

Source: http://www.h-online.com/security/news/item/EFI-rootkit-for-Macs- 
demonstrated-1655108.html 



34. July 30, BBC News - (International) Ubisoft rush to fix security hole exposed by 
plug-in. Games maker Ubisoft was forced to release an emergency patch to fix a 
security hole discovered in its Uplay application. A Web browser add-on reportedly left 
users open to outside attackers gaining control of their computer. The Uplay software is 
bundled with major titles like Assassin’s Creed. The flaw was discovered by a Google 
employee. It was discovered that any Web site could force users with the plug-in to 
open any program on their PC. To demonstrate this, one security researcher created a 
Web site proving the exploits’ existence. When a person visited the Web site, the 
calculator program would launch. While the calculator is harmless, experts warned the 
technique could be used to launch a potentially malicious program. 

Source: http://www.bbc.co.uk/news/technology-19053453 

35. July 30, Infosecurity - (International) New Morto worm variant emerges with file 
infection capability. A new variant of the Morto worm added a file infection capability 
to the malware’s arsenal of weapons, warned a Microsoft researcher. The original 
Morto worm was able to compromise remote desktop protocol (RDP) connections by 
exploiting weak administrator passwords, but the new strain has added file infection 
capability to its repertoire, noted the researcher with the Microsoft Malware Protection 
Center. He explained that the new Morto variant “infects .EXE files found on fixed and 
removable drives as well as on default RDP and Administrative shares, but avoids 
infecting files that contain strings like ‘windows’, ‘winnt’, ‘qq’, ‘Outlook’, ‘System 
Volume Information’ or ‘RECYCLER’ in their path. Morto also leaves an infection 
marker, ‘PPIF’ in infected files.” 

Source: http://www.infosecuritv-magazine.com/view/27277/ 

36. July 28, CNET- (International) Tools boast easy cracking of Microsoft crypto for 
businesses. A cryptography specialist released tools at the Def Con conference July 28 
for easily cracking passwords in wireless and virtual private networks that use a 
popular encryption protocol based on an algorithm from Microsoft called MS- 
CHAPv2. The tools crack WPA2 (Wi-Fi Protected Access) and VPN passwords used 
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by corporations and organizations running networks protected by the PPTP (Point-to- 
Point Tunneling Protocol), which uses MS-CHAPv2 for authentication. ChapCrack 
captures the MS-CHAPv2 handshakes, or SSL (Secure Sockets Layer) negotiation 
communications, and converts them to a token that can be submitted to CloudCracker. 

It takes less than a day for the service to return results in the form of another token that 
is plugged back into ChapCrack where the DES (Data Encryption Standard) keys are 
cracked. With that data, someone can see all of the information traveling across the Wi- 
Fi network, including sensitive corporate emails and passwords, and use passwords that 
were revealed to log in to corporate networks. The tools are designed for penetration 
testers and network auditors to use to check the security of their WPA2 protected 
networks and VPNs, but they could also be used by people who want to steal data and 
get unauthorized access to networks. 

Source: http://news.cnet.com/8301-1009 3-5748 1855-83/tools-boast-easy-cracking-of- 
microsoft-crypto-for-businesses/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 

37. July 31, KCOY 12 Santa Maria - (California) Evacuation from Arroyo Grande Wal- 
Mart, bomb sniffing dogs on site. Arroyo Grande Police confirmed to Central Coast 
News that the Wal-Mart store in Arroyo Grande, California, received what they 
believed was a ‘credible’ bomb threat near closing July 30. Officials then evacuated the 
store and police did an initial search. Just after midnight July 31, bomb sniffing dogs 
from the California State Parks department arrived on scene to go through the building. 
Customers were asked to evacuate the store, as Wal-Mart employees told customers 
there was a power outage and they needed to leave the store immediately. 

Source: http://www.kcov.com/storv/19152722/customers-evacuated-from-arrovo- 
grande-wal-mart 

38. July 31, Jersey Journal - (New Jersey; Missouri; Kansas) 700 people evacuated from 
Mill Creek Mall Walmart in latest of 12 bomb threats plaguing its chain 
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stores. Some 700 people were evacuated from the Walmart at the Mill Creek Mall in 
Secaucus, New Jersey, July 30 after a bomb threat was phoned in, authorities said. The 
building was cordoned off to the public as police used bomb-sniffing dogs to conduct 
an extensive search of the 100,000- square-foot facility. No explosive devices were 
found. The threat was one of 12 that has been recently phoned in to Walmarts across 
the nation. The Hudson County sheriff said someone called the manager’s office in the 
Walmart that afternoon and said an explosive device was going to go off. The store 
notified Secaucus police who called the sheriff’s office. Trailers in the vicinity of the 
store were also searched, police said. The Secaucus scare came after 1 1 bomb threats, 8 
in Missouri and 3 in Kansas that were phoned in over the July 28 weekend. Police in 
Missouri said July 30 they had a telephone number they believed all the threats in the 
Midwest originated from and their investigation was very active. 

Source: http://www.ni.com/iiournal- 

news/index.ssf/2012/07/700 people evacuated from mill.html 

39. July 31, WCMH 4 Columbus - (Ohio) Fire devastates decades old Circleville roller 
rink, U.S. 22 closed. The Circle ‘D’ Recreation roller rink and bowling alley in 
Circleville, Ohio, was destroyed in a fire July 30. Upon arrival, the structure had 
already partially collapsed, said firefighters. Fire officials said they were concerned 
about the fire spreading to a neighboring tire shop, but firefighters were able to contain 
the fire. Firefighters remained on scene as a backhoe was called in to knock down 
portions of the structure, so the fire in the basement could be extinguished. The 
structure was a complete loss. 

Source: http://www2.nbc4i.com/news/2012/iul/31/crews-battling-fire-circleville-ar- 
1121607/ 



40. July 30, Virginian-Pilot - (Virginia) Newport News Pavilion fire likely caused by 
lightning. The cause of a fire that destroyed a structure known as the Pavilion in 
Newport News, Virginia, was still undetermined, but the fire marshal’s office stated it 
believed it was a result of a lightning strike. Firefighters were called to the fires July 29 
and found the pavilion, a banquet and meeting facility next to the golf course, fully 
engulfed in flames, a fire department news release said. The fire had burned for some 
time prior to being reported because the structure was in a remote area. The structure 
was deemed a total loss. It was valued at more than $500,000. 

Source: http://hamptonroads.com/2012/07/newport-news-pavilion-fire-likely-caused- 
lightning 

41. July 30, Baltimore Sun - (Maryland) Gas leak near Under Armour headquarters 
repaired. A gas leak in Baltimore forced the evacuation July 30 of occupants of several 
blocks of rowhouses as well as workers at the Under Armour headquarters. The broken 
pipe was repaired within a few hours. A crew of contractors told fire officials they 
inadvertently struck a gas line while working on road repairs, the fire spokesman said. 
Baltimore Gas and Electric Co. crews repaired the gas line later that afternoon. In all, 
hundreds were evacuated. All Under Armour employees were evacuated from the 
company’s headquarters buildings, the company said. About 1,200 people work for 
Under Armour at the complex, Pelkey said. Other tenants include AOL, Mercy Medical 
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Center, and a child care center. 

Source: http://www.baltimoresun.com/news/breaking/bs-md-gas-leak- 
20120730.0.4748411 .story 



42. July 30, WSOC 9 Charlotte - (North Carolina) Deputies: Ashe Co. church destroyed 
in fire that was intentionally set. The North Beaver Baptist Church in Ashe County, 
North Carolina, was destroyed after sheriff’s deputies said someone broke in and set 
fire to it over the July 28 weekend. Shortly after firefighters responded, much of the 
roof collapsed at the church and the fellowship hall next door. Officials said that the 
damage was estimated at $750,000. 

Source: http://www.wsoctv.com/news/news/local/deputies-ashe-co-church-destroyed- 
fire-was-intenti/nP6hj/ 

For another story, see item 43 
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National Monuments and Icons Sector 



43. July 31, Modesto Bee - (California) Plumas wildfires burn 1,300 acres, close 
trail. Two wildfires burning in the Plumas National Forest have together consumed 
more than 1,300 acres in steep rugged country in Plumas County, California, the 
Modesto Bee reported July 31. The 1,000-acre Peak fire started July 28 near Squaw 
Peak 7 miles northeast of Lake Davis. The blaze, which was 30 percent contained, 
forced the closure of a U.S. Forest Service tent and trailer campground, said a Plumas 
forest spokeswoman. Full containment of the fire was expected by August 3. In the 
Feather River Canyon 30 miles west of Quincy, the Chips fire grew to more than 300 
acres and caused forest officials to close the Pacific Crest Trail between Belden and 
State Highway 36. It was burning between Chips and Indian creeks north of state 
Highway 70, said a public affairs officer for the Plumas forest. The Chips fire, which 
was human-caused, started July 29. Four residences at Maggies Maple Leaf Resort 
were threatened, the officer said. She estimated that the Chips fire would be contained 
by August 7. 

Source: http://www.modbee.com/2012/07/31/2305289/plumas-wildfires-burn-130Q- 
acres.html 



44. July 30, Associated Press - (Missouri) Hundreds of acres burn in Missouri 
forest. Firefighters said it could be several days before they could fully contain a 
wildfire in the Mark Twain National Forest in south-central Missouri, the Associated 
Press reported July 30. The U.S. Forest Service said about 400 acres were burning as of 
July 30, about 9 miles southeast of the Ozark County town of Dora. Officials believed 
it was caused by lightning. The fire was burning on National Forest land but officials 
said parts of some private lands may be affected. 

Source: http://www.sacbee.com/2012/07/3Q/4675515/hundreds-of-acres-burn-in- 
missouri.html 
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Dams Sector 

45. July 30, Lawrence- Journal World - (Kansas) Statehouse Live: Navigation-related 
water releases from Perry, Tuttle Creek, Milford will stop next week, officials 
say. The U.S. Army Corps of Engineers said July 30 that it will stop water releases for 
downstream navigation purposes from Perry, Tuttle Creek, and Milford lakes beginning 
August 7 or 8 to help battle the drought. The governor of Kansas and a senator also said 
that the Corps pledged not to release water in October. The releases were being made to 
support navigation needs on the Missouri River. 

Source: http://www2.liworld.com/news/2012/iul/3Q/statehouse-live-navigation-related- 
water-releases-/ 
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